Tag: Security
-
How DLL Name Resolution Works on Windows: Search Order, Known DLLs, API Sets, and SxS in Practice
A practical guide to Windows DLL name resolution, covering search order, Known DLLs, loaded-module checks, API sets, SxS manifests, and the impact of LoadLib...
-
When Windows Admin Privileges Are Actually Required: UAC, Protected Areas, and Practical Design Boundaries
A practical guide to when Windows admin privileges are truly required, covering UAC, protected locations, services, drivers, and per-user versus per-machine ...
-
How to Isolate Only Administrator-Required Work in Windows Apps
A practical deep dive into keeping a Windows UI app at asInvoker while isolating administrator-only operations into a helper EXE, covering UAC, runas, named ...
-
DPAPI Best Practices for Keeping Secrets out of Plaintext Config in Windows Apps
A practical guide to using DPAPI and ProtectedData to keep passwords, API tokens, and other secrets out of plaintext Windows app configuration files, includi...
-
A Minimum Security Checklist for Windows Application Development
A practical minimum security checklist for Windows desktop application development, covering permissions, signing, secrets, transport security, input validat...